Public read-only CLI

Audit, Registry and OKF through a predictable interface for agents and scripts.

The official CLI observes public resources and returns versioned JSON. It uses no credentials, writes no files, changes no websites and does not replace MCP.

Open CLI documentation

Audit a public website

The audit command uses the web scanner DNS, SSRF, timeout and response-size controls. Dry-run explains the planned requests without sending them.

Read the Registry

Registry get retrieves only published profiles and validates their contract. Drafts, dossiers and private observations remain out of scope.

Verify OKF

OKF verify checks the manifest, routes, media types and SHA-256 values in memory. Each execution produces a stable response and predictable exit code.

Visible boundaries

The current CLI is read-only and accepts no cookies, OAuth or API keys.
Initial distribution is repository-first; other channels require their own gate.